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System for providing personalized services. 



FIELD OF THE INVENTION 

The invention relates to a system for providing personalized services. 

The invention also relates to an apparatus and a gatekeeper device for use in the 

above system. 

5 The invention furthermore relates to a method for providing a personalized 

services. 

BACKGROUND OF THE INVENTION 

A system of the above type is widely known. For example, it is known to store 

10 user profiles in consumer equipment to enable personalized operation in response to the user 
activating his user profile, for example, by means of an on-screen menu. Such a user profile 
may comprise information relating to the user's favorite TV or radio channels and the presets 
they should be assigned to. It may also comprise information about preferred parameter 
settings such as sound level, picture contrast, brightness etc. 

15 It is foreseen that in the near future an increasing number of apparatuses will 

store information about personal data or preferences of users in order to adapt (personalize) 
their behavior to a particular user. On the one hand this will lead to increased usability and 
efficiency. On the other hand in the apparatuses involved user profiles have to be built up and 
activated each time the apparatus is used. This may involve inserting a chip-card, or entering a 

20 password, which is inconvenient. Alternatively, the user may be recognized by automatic 
identification (fingerprint, face or voice recognition, transponder technology), but a 
disadvantage of such systems is that privacy is not guaranteed. 

OBJECT AND SUMMARY OF THE INVENTION 
25 It is an object of the invention to provide an improved system of the type 

defined in the opening paragraph. To that end, the system according to the invention 
comprises a gatekeeper device, which is capable of communicating an identity tag with at least 
one apparatus, the gatekeeper device comprising user operable control means for controlling 
said communication of identity tags, thus acting as a gatekeeper to prevent uncontrolled use of 
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personal information by the apparatus to be operated. Said gatekeeper device may be a small 
tool which can be carried by the user, for example, in the form of a decoration. It enables the 
user to build up anonymous relationships with various apparatuses. No personal identity codes 
and no biometric features need to be communicated, and the identity tags only have sense for 
5 one specific relationship. In response to the user expressing a wish to establish a relationship 
with an apparatus, for example, by means of a suitable button on the gatekeeper device, an 
identity tag is generated to identify said relationship and stored in both the gatekeeper device 
and the apparatus. In a preferred embodiment, the apparatus and the gatekeeper device are 
capable of remote, for example, RF, capacitive or infrared, communication. 

10 Said control means enable the user to specify whether the gatekeeper device 

should be recognized by an apparatus to be operated, and to which extent the operated 
apparatus should adapt its behavior to the user. In the most simple embodiment, the user has 
the choice between personalized and non-personalized behavior. For example, the gatekeeper 
device may notify the user that an apparatus is approached which is capable of personalizing 

15 its behavior and already has a relationship with the gatekeeper device or is capable of 

engaging in such a relationship. In a preferred embodiment the apparatus is not aware of the 
z gatekeeper device until the user explicitly confirms that such a relationship may be established 

or exploited.The privacy and anonymity of the user is thus guaranteed. 

The gatekeeper device in a further embodiment allows the user to specify how 

20 the operated apparatus and the gatekeeper device have to communicate in subsequent 

occasions. For example, the user may specify that the apparatus may automatically adapt its 
behavior as soon as the gatekeeper device is recognized, or under which conditions, e.g. only 
in the day time and not in the evening or during the night. The user may disable said automatic 
recognition at each of said subsequent occasions, e.g. by specifying that from that moment on 

25 an explicit confirmation by the user is required. Finally, the gatekeeper device may allow the 
user to terminate a relationship, causing the user profile to be removed and the identity tag to 
be made invalid. A relationship may involve one specific apparatus exclusively, or it may 
involve multiple similar apparatuses, e.g. from the same manufacturer. A user profile may be 
stored with the identity tag in the gatekeeper device and transmitted each time to the apparatus 

30 to be operated. Alternatively, the user profile may be stored in the apparatus to be operated, 
waiting to be activated by the identity tag obtained from the gatekeeper device. In both cases 
the user profile may be shared with other apparatuses, e.g. by transmission through a network 
connecting the apparatuses, or by making the apparatuses respond to the same identity tag in 
order to obtain the user profile from the gatekeeper device. A relationship may involve 



PHN 17.430 



3 10.1,1.1999 
multiple user profiles which are selected by the user or automatically activated in accordance 
with certain conditions, e.g. the time of the day. 

BRIEF DESCRIPTION OF THE DRAWINGS 
5 These and other aspects of the invention are apparent from and will be 

elucidated, by way of a non-limitative example, with reference to the embodiment described 
hereinafter. In the drawings: 

Figure 1 shows a diagram of a system according to the invention, comprising 
various apparatuses and a gatekeeper device, 
10 Figure 2 shows an embodiment of the gatekeeper device. 



DESCRIPTION OF EMBODIMENT 

Figure 1 shows a diagram of a system according to the invention, comprising a 
gatekeeper device 1 and various apparatuses to be operated, such as an information terminal 2, 

15 a coffee machine 3 and an audio system 4. Each of the apparatuses 2, 3 and 4 is capable of 
adapting its behavior to a specific user in response to information obtained from the 
gatekeeper device 1. For example, the information terminal 2 tailors the information it 
provides to the knowledge and background of the user. The coffee machine 3 knows the user's 
taste and suggests this as a default choice. The audio systems compiles CD-tracks and adjusts 

20 the sound parameters in accordance with the user's taste. The apparatuses 2, 3 and 4 

continuously transmit an RF signal indicating that they are responsive to a gatekeeper device. 
Alternatively, infrared or ultrasound signals could be used or capacitive or inductive 
techniques may be utilized. If the gatekeeper device 1 approaches one of the devices 2, 3 or 4, 
it detects the RF signal and notifies the user, e.g. by a flashing light, a beep or a vibration. 

25 Dependent on the relationship which exists between the gatekeeper device 1 and the apparatus 
2, 3 or 4, the gatekeeper device 1 may decide to send an identity tag to the apparatus 
autonomously, or leave that decision to the user. Upon receiving the identity tag, the apparatus 
can adapt its behavior to the user profile associated with the identity tag. 

The gatekeeper device 1 is provided with user operable controls to allow the 

30 user to establish, terminate or alter relationships with various apparatuses. 

Figure 2 shows an embodiment of the gatekeeper device 1 which will be 
referred to as the 'gatekeeper' henceforth. It comprises four buttons 5, 6, 7, and 8. The button 5 
is used for switching the gatekeeper on and off. If the gatekeeper is switched off, the signals 
from all apparatuses are ignored and no personalized behavior is exhibited. If the gatekeeper is 
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? switched on, various situations may occur which will be discussed hereinafter. The buttons 6, 
7 and 8 allow the user to make various choices regarding the relationships with the apparatuses 
2, 3, and 4. Button 6 has a red color and enables the user not to exploit the personalization 
capabilities of the apparatus (stay unrecognized). Button 7 has an orange color and enables the 
5 user to establish an explicit relationship with the apparatus, which means that the user has to 
confirm each time the apparatus is used. Button 7 is combined with a LED which can make 
the button blink. Button 8 has a green color and enables the user to establish an implicit 
relationship with the apparatus, which means that the apparatus is allowed to adapt its 
behavior without confirmation by the user. 
10 The following situations may occur: 

1) New relationship: 

If the gatekeeper is switched on and there is no relationship yet with the 
apparatus to be operated, the orange button 7 starts blinking, indicating that the apparatus is 
capable of engaging in such a relationship. If the user does nothing, no relationship is 
15 established and the personalization capabilities of the apparatus are not exploited. The next 
time the apparatus is approached, the button 7 will start blinking again. 

By pressing the red button 6, the user indicates that no relationship is desired, 
making the gatekeeper remember the apparatus and ignore the apparatus in the future, without 
notifying the user. 

20 By pressing the orange button 7, the user indicates that he wishes to establish an 

explicit relationship. The apparatus associates an identity tag or key with the new relationship 
and transmits it to the gatekeeper which stores the key for future identification of the 
apparatus. A user profile is then built up by watching the user's habits in operating the 
apparatus. Alternatively, a user profile related to a similar apparatus may be entered explicitly 

25 by the user or transferred to the apparatus, either from a memory in the gatekeeper or via a 
network connecting the apparatus with similar apparatuses. The next time the apparatus is 
approached, the user is asked for a confirmation (by means of the blinking orange button 7). If 
the user confirms, the stored key is transmitted to the apparatus to identify the relationship and 
the user profile associated to the relationship is activated. If the user profile is stored in the 

30 gatekeeper, it is transmitted to the apparatus. 

By pressing the green button 8, the user indicates that he wishes to establish an 
implicit relationship. The same actions are performed as when pressing the orange button, thus 
establishing a new relationship, however, the next time the apparatus is approached, the user is 
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not asked for confirmation and the user profile associated with the relationship is activated 
automatically. 

If the user pressed the red button a previous time, the gatekeeper does not notify 
the user if an apparatus is approached which is responsive to the gatekeeper. Nevertheless, the 
user can establish a relationship by pressing the orange or green button. Each successful action 
may be confirmed, e.g. by a beep or blinking LED. 

2) Explicit relationship: 

If the gatekeeper approaches an apparatus for which an explicit relationship 
exists, the gatekeeper recognizes the apparatus. This could be realized in various ways. As 
described hereinbefore, the apparatus initially identifies itself to the gatekeeper by transmitting 
a signal. This signal could comprise an 'apparatus key' which also constitutes a part of said 
identity tags or keys distributed by the apparatus to identify relationships with various 
gatekeeper devices. The apparatus can be recognized by comparison of the apparatus key with 
the relationship keys stored in the gatekeeper. Additionally, a 'manufacturer's key' may be 
contained in the apparatus key, so as to identify the manufacturer of the apparatus. This 
enables the gatekeeper to recognize similar apparatuses from the same manufacturer and 
establishing relationships utilizing the same user profile. Alternatively, the gatekeeper 
explicitly relates the identity tags to the identity of the apparatus from which the tag was 
received. 

Upon recognition of the apparatus, the orange button 7 starts blinking, waiting 
for the user's confirmation. If the user does nothing, the personalization capabilities of the 
apparatus are not exploited (this time). The user may confirm by pressing the button 7, thus 
activating the personalized behavior, or convert the explicit relationship into an implicit 
relationship by pressing the green button 8. The user may also terminate the explicit 
relationship by pressing the red button 6. 

3) Implicit relationship: 

If the gatekeeper approaches an apparatus with which an implicit relationship 
exists, the gatekeeper recognizes the apparatus as described hereinbefore. No confirmation by 
the user is awaited and the personalized behavior is activated immediately. However, the user 
may decide to convert the implicit relationship into an explicit relationship by pressing the 
orange button 7 or by terminating the relationship at all by pressing the red button 6. 
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• Although the invention has been described with reference to particular 

illustrative embodiments, further versions and modifications are feasible within the scope of 
the inventive concept. 

Thus, for example, various user profiles may be involved in one relationship, 
5 each user profile corresponding to personal information of a different level of confidentiality. 
For example, medical data relating to the user may be incorporated in a user profile, e.g. for 
searching a library catalogue, but not in every situation, e.g. in the presence of bystanders. 

The gatekeeper enables users to express different identities. People behave 
different 4 at home, at work or in the pub. The gatekeeper is a tool that enables users to exert 
10 control over their expressed identities. People may possess multiple gatekeepers, each with a 
different appearance and suited for a different situation. Wearing two or more gatekeepers in 
combination may have the effect that the user profiles are combined in some way. 

Multiple gatekeepers may simultaneously control the behavior of one particular 
apparatus. For example, a message board or teleconference system shared by several users 
15 may allow each user to specify which personal information may be presented to the other 
users. For other parameters, such as sound level and picture brightness, the apparatus may 
attempt to find a compromise between the different values from the various user profiles. 

The word 'comprising' does not exclude the presence of elements or steps other 
than those listed in a Claim. 
20 In summary, the invention relates to a system for providing personalized 

services. The system comprises an apparatus which is capable of personalizing its behavior in 
accordance with a user profile, and also a gatekeeper device comprising control means for 
allowing a user to control said personalization of the apparatus. The gatekeeper device is 
capable of detecting apparatuses which have personalization capabilities and of notifying the 
25 user upon such detection. The user may then decide to establish a relationship with the 

apparatus, which relationship specifies the extent of personalization which the apparatus is 
allowed to exhibit and whether confirmation by the user is required at future occasions. The 
user is allowed to change the relationship at any time. The system according to the invention 
enables the user to build up anonymous relationships with various apparatuses, providing the 
30 user with personalized services while privacy is guaranteed. 
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CLAIMS: 



1. A system for providing personalized services, comprising an apparatus which is 
capable of personalizing its behavior in accordance with a user profile, characterized in that 
the system also comprises a gatekeeper device for controlling said personalization, said 
gatekeeper device comprising user operable control means for adjusting the extent of said 

5 personalization. 

2. A system as claimed in Claim 1, characterized in that said control means 
comprise confirmation means for specifying that the apparatus is allowed to personalize its 
behavior. 

10 

3. A system as claimed in Claim 1 or 2, characterized in that said control means 
comprise rejection means for specifying that the apparatus is not allowed to personalize its 
behavior. 

15 4. A system as claimed in any of the claims 1 to 3, characterized in that the 

gatekeeper device is capable of detecting the proximity of the apparatus, the gatekeeper device 
also comprising notification means for notifying such detection. 

5. A system as claimed in claim 4, characterized in that the apparatus is capable 
20 of transmitting an identification signal for facilitating said detection. 

6. A system as claimed in claim 1, characterized in that the gatekeeper device 
comprises further user operable control means for establishing a relationship with the 
apparatus, said relationship specifying the extent of personalization at subsequent occasions. 

25 

7. A system as claimed in Claim 6, characterized in that the apparatus is capable 
of generating an identity tag which identifies said relationship and of exchanging said identity 
tag with the gatekeeper device, the gatekeeper device being capable of storing said identity 
tag. 
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-8. A system as claimed in any of the Claims 1 to 7, characterized in that the 

gatekeeper device is capable of storing at least one user profile and of exchanging said user 
profile with said apparatus. 

5 9. A system as claimed in any of the Claims 1 to 8, characterized in that the 

apparatus is capable of exchanging a user profile with said gatekeeper device or a further 
apparatus. 

10. A gatekeeper device for use in a system as claimed in any of the Claims 1 to 9. 

10 

11. An apparatus for use in a system as claimed in any of the Claims 1 to 9. 

12. A method for providing a personalized services, utilizing a system as claimed in 
any of the Claims 1 to 9. 
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The invention relates to a system for providing personalized services. The 
system comprises an apparatus which is capable of personalizing its behavior in accordance 
with a user profile, and a gatekeeper device which comprises control means for allowing a 
user to control said personalization of the apparatus. The gatekeeper device is capable of 
detecting apparatuses which have personalization capabilities and of notifying the user upon 
such detection. The user may then decide to establish a relationship with the apparatus, which 
relationship specifies the extent of personalization which the apparatus is allowed to exhibit 
and whether confirmation by the user is required at future occasions. The user is allowed to 
change the relationship at any time. The system according to the invention enables the user to 
build up anonymous relationships with various apparatuses, providing the user with 
personalized services while privacy is guaranteed. 
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